$ rpki-client -vvf rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa File: 3134322e3134372e39352e302f32342d3234203d3e203437353533.roa (raw, json) Hash identifier: VcHnZPXmg+gwqZFeMl1gjuitPawQ201SlIEuoE5gbAc= Subject key identifier: 00:C3:9B:3E:13:22:17:1E:B7:AC:84:6D:3B:22:92:F5:BE:56:42:48 Certificate issuer: /CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Certificate serial: 5DA64BAE2DFBCFDBF1277F067B7AB647D944A957 Authority key identifier: DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject info access: rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa Signing time: Wed 02 Jul 2025 16:24:24 +0000 ROA not before: Wed 02 Jul 2025 16:19:24 +0000 ROA not after: Wed 01 Jul 2026 16:24:24 +0000 asID: 47553 IP address blocks: 142.147.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 13:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a6:4b:ae:2d:fb:cf:db:f1:27:7f:06:7b:7a:b6:47:d9:44:a9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524 Validity Not Before: Jul 2 16:19:24 2025 GMT Not After : Jul 1 16:24:24 2026 GMT Subject: CN=00C39B3E1322171EB7AC846D3B2292F5BE564248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d6:94:d7:7a:cf:72:ca:7c:e5:51:e9:0f:0a: 6a:67:31:ba:e7:ed:e0:3c:9f:a4:2b:ab:cc:9d:ba: d3:87:e3:57:6f:ce:df:88:ec:86:04:20:6c:a4:63: 37:81:0a:b1:5d:3f:11:fa:b3:2c:60:e6:b4:78:48: 98:cf:fe:78:d0:10:0f:21:f6:1a:26:ec:da:bc:14: 32:ed:ac:9f:71:0e:45:8d:b6:86:3a:d0:dd:b7:ed: 99:8a:69:3b:2b:84:7a:cd:b1:43:72:27:15:c1:b2: 7e:15:57:ff:f4:41:66:34:26:a4:aa:27:49:3b:2c: 82:4f:5e:89:43:5a:a6:1e:f5:2e:98:1f:6a:54:80: b4:4d:1e:76:b6:21:4b:d6:43:0e:e6:38:6b:19:b6: 67:0e:4d:f4:16:b4:32:0a:5c:f3:11:fb:27:b6:54: 9a:4b:c4:3d:4d:86:1d:24:09:f3:15:4e:64:f4:e5: b0:65:bc:8d:9d:08:54:1b:af:08:62:f2:d2:ff:5b: 79:b3:20:f7:04:ad:2f:01:ff:9d:56:60:1d:d8:a1: 91:83:ab:94:b9:5f:7b:c2:f9:6c:5f:96:a6:4b:3a: 75:ed:fd:07:ce:6d:76:8b:38:2a:51:19:cd:33:e4: f1:f4:ed:a9:94:6e:ea:04:af:98:58:ab:fa:e3:56: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C3:9B:3E:13:22:17:1E:B7:AC:84:6D:3B:22:92:F5:BE:56:42:48 X509v3 Authority Key Identifier: keyid:DB:AC:61:EF:F8:0C:31:58:04:BC:FD:A2:BC:F7:3C:19:A6:24:8D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.roa.net/rrdp/xTom/46/DBAC61EFF80C315804BCFDA2BCF73C19A6248D99.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/54c036c5-e20a-4ba1-8516-5ab3a356dbfd/6555c74db5287d4077fbb273a5b5a5c2d28c158b65b814c524.cer Subject Information Access: Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/46/3134322e3134372e39352e302f32342d3234203d3e203437353533.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.147.95.0/24 Signature Algorithm: sha256WithRSAEncryption 72:23:26:88:74:2a:91:97:22:e2:03:55:85:73:79:2e:f9:d7: f8:8a:90:27:46:31:6d:2c:8d:0f:49:34:0d:96:56:7e:32:14: e5:5c:22:91:32:b0:e6:a4:94:1d:d2:60:e1:c8:44:cb:98:a2: ed:b4:f1:81:89:9d:16:2f:8e:83:16:4c:1e:64:ad:f6:2a:22: 39:4d:b5:31:a9:b6:55:0c:04:27:99:4f:bb:8b:ec:86:25:51: 1b:31:47:ee:7e:34:bd:97:e0:2e:2d:f7:d9:52:52:30:ad:e8: 24:34:7c:ff:4c:72:99:a7:7b:31:f6:82:ea:05:0d:c5:cd:6a: 5f:03:63:39:d8:33:72:10:22:73:44:d8:13:07:44:68:bb:56: ae:0b:7f:cb:0f:49:10:4c:0a:24:8e:3a:3b:b4:d1:03:d3:62: 41:93:9d:76:45:21:25:17:6b:25:65:f0:b7:18:7f:7f:34:eb: 80:7b:84:90:f9:3c:3b:56:a6:31:53:65:f4:3c:7e:db:95:49: 2f:a0:c5:c3:46:20:5b:a2:1c:76:b0:90:68:35:3f:5b:55:56: be:4b:5a:df:bc:d9:86:39:45:69:b1:d3:4e:70:44:42:3a:2c: a3:f0:23:cd:f2:20:cb:3c:e4:ee:e4:0f:88:e4:b0:25:3c:64: a2:a1:f5:70 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIUXaZLri37z9vxJ38Ge3q2R9lEqVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjU1NWM3NGRiNTI4N2Q0MDc3ZmJiMjczYTViNWE1YzJk MjhjMTU4YjY1YjgxNGM1MjQwHhcNMjUwNzAyMTYxOTI0WhcNMjYwNzAxMTYyNDI0 WjAzMTEwLwYDVQQDEygwMEMzOUIzRTEzMjIxNzFFQjdBQzg0NkQzQjIyOTJGNUJF NTY0MjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0daU13rPcsp8 5VHpDwpqZzG65+3gPJ+kK6vMnbrTh+NXb87fiOyGBCBspGM3gQqxXT8R+rMsYOa0 eEiYz/540BAPIfYaJuzavBQy7ayfcQ5FjbaGOtDdt+2Zimk7K4R6zbFDcicVwbJ+ FVf/9EFmNCakqidJOyyCT16JQ1qmHvUumB9qVIC0TR52tiFL1kMO5jhrGbZnDk30 FrQyClzzEfsntlSaS8Q9TYYdJAnzFU5k9OWwZbyNnQhUG68IYvLS/1t5syD3BK0v Af+dVmAd2KGRg6uUuV97wvlsX5amSzp17f0Hzm12izgqURnNM+Tx9O2plG7qBK+Y WKv641ZZqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFADDmz4TIhcet6yEbTsikvW+ VkJIMB8GA1UdIwQYMBaAFNusYe/4DDFYBLz9orz3PBmmJI2ZMA4GA1UdDwEB/wQE AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kucm9hLm5ldC9ycmRw L3hUb20vNDYvREJBQzYxRUZGODBDMzE1ODA0QkNGREEyQkNGNzNDMTlBNjI0OEQ5 OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThm NmMtZDZjOTFiMGI4NDE1LzU0YzAzNmM1LWUyMGEtNGJhMS04NTE2LTVhYjNhMzU2 ZGJmZC82NTU1Yzc0ZGI1Mjg3ZDQwNzdmYmIyNzNhNWI1YTVjMmQyOGMxNThiNjVi ODE0YzUyNC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov L3Jwa2kucm9hLm5ldC9ycmRwL3hUb20vNDYvMzEzNDMyMmUzMTM0MzcyZTM5MzUy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzNTMzLnJvYTAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpNf MA0GCSqGSIb3DQEBCwUAA4IBAQByIyaIdCqRlyLiA1WFc3ku+df4ipAnRjFtLI0P STQNllZ+MhTlXCKRMrDmpJQd0mDhyETLmKLttPGBiZ0WL46DFkweZK32KiI5TbUx qbZVDAQnmU+7i+yGJVEbMUfufjS9l+AuLffZUlIwregkNHz/THKZp3sx9oLqBQ3F zWpfA2M52DNyECJzRNgTB0Rou1auC3/LD0kQTAokjjo7tNED02JBk512RSElF2sl ZfC3GH9/NOuAe4SQ+Tw7VqYxU2X0PH7blUkvoMXDRiBbohx2sJBoNT9bVVa+S1rf vNmGOUVpsdNOcERCOiyj8CPN8iDLPOTu5A+I5LAlPGSiofVw -----END CERTIFICATE-----Generated at Fri Jul 25 01:00:41 2025 by rpki-client